Locked accounts in /etc/passwd

[Joe Profaizer]

Is there a way to grep the /etc/passwd file to find out if there are locked accounts? The only way I know of is to go through SAM one by one to see if accounts are locked out.

Any ideas on expediting this would be appreciated.

Thanks,

..Joe

[Geoff Wild]

/usr/lbin/getprpw userid
can tell you if user is locked.

Rgds...Geoff

[Rick Garland]

If the system is trusted, view this post. Talks about use of the 'getprpw' command to get the info you seek.

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1050217

[Geoff Wild]

Course - if it isn't trusted, the encrypted password will be an asterick: *

grep -e "*:" /etc/passwd


Rgds...Geoff

[Sp4admin]

Hi Joe,

You can check on accounts at the command line useing the getprpw command. when you do a getprpw and numbers come back that are 1 then the account is locked. if it comes back wirh all 0's then the account is not locked.

#getprpw -r -m lockout username

#modprpw -k username

sp,

[A. Clay Stephenson]

Actually to be precise, if the system is untrusted the locked accounts are those which do not have a 13 character value in the passwd hash field. By convention, it is a '*' which is an impossible hash but I have used other non-13 character strings to designate why an account is locked.

[Raj D.]

Joe,

# cd /usr/lbin/
# ./getprpw username
And check for the lockout value, 1 is locked.

you can release the locked account by :
# modprpw -k username

Remember this is for trusted systems. Non trusted systems you can use SAM and Reactivate the user.

cheers,
Raj.

[Asif Sharif]

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1062988&admit=-682735245+1168490602245+28353475